should sub_jwk be a bare key or kid

[Sakurann]

In did-siop profile, sub_jwk claim in SIOP response must contain a kid that is a DID URL referring to the verification method in the SIOP’s DID Document. Based on OIDC Section 7.4 Self-Issued OpenID Provider Response, sub_jwk claim must contains public key that is a bare key in JWK format.

Would it make sense to make sub_jwk a bare public key to stay backward compatible with OIDC SIOP?

[awoie]

The sub_jwk is a bare JWK. See https://identity.foundation/did-siop/#example-12

That was one limitation of the SIOP spec. Please see #43 for more info.